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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )□ Responsive to communication(s) filed on . 



2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) S Claim(s) 1-23 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 7-23 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

11) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 1 20 

1 3) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

a)DAII b)D Some*c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional applicatic 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 . 
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DETAILED ACTION 
Claim Rejections - 35 USC §102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the United 
States before the invention thereof by the applicant for patent, or on an international application by another who 
has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this title before the invention 
thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act of 1999 
(AIPA) and the Intellectual Property and High Technology Technical Amendments Act of 2002 
do not apply when the reference is a U.S. patent resulting directly or indirectly from an 
international application filed before November 29, 2000. Therefore, the prior art date of the 
reference is determined under 35 U.S.C. 102(e) prior to the amendment by the AIPA (pre-AIPA 
35 U.S.C. 102(e)). 

2. Claims 13, 15, 17-19, 21-23 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Walker et al. (U.S. Pub. No. 2003/002881 1 Al). 

As to claim 13, Walker et al discloses a method of operating a computer system (See 
page 3, paragraph 0019), comprising: 

scanning the fingerprint of a user to generate user fingerprint data (See page 1, paragraph 
0008, also see page 3, paragraph 0019); 
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using said user fingerprint data to access a database of stored fingerprint data and to 
compare said user fingerprint data with stored fingerprint data (See page 2, paragraph 0017); 

assigning an access authorization datum to said user based on the results of 
said comparing step (See page 3, paragraph 0021, wherein "access authorization datum" reads on 
"fingerprint authentication code"); 

controlling how the user can interact with said computer system based on said assigned 
authorization datum (See page 2, paragraph 0017, wherein "controlling how the user can 
interact" reads on "extent of a user's authorization is determined by the user's profile"). 

As to claim 15, Walker et al. discloses wherein said scanning step is performed using a 
reading device that is integral with a pointing device of said computer system (See page 2, 
paragraph 0017, also see pages 3-4, paragraphs 0020-0023, wherein "reading device that is 
integral with a pointing device" reads on "touch screen/pad"). 

As to claim 17, Walker et al. discloses wherein said scanning step is performed in 
response to a predetermined action taken by the user in interacting with said computer system 
(See page 3, paragraph 0019). 

As to claim 18, Walker et al. discloses wherein said predetermined action is a pointing 
device action taken by the user through operation of a reading device that is integral with a 
pointing device of said computer (See page 2, paragraph 0017, also see pages 3-4, paragraphs 
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0020-0023, wherein "reading device that is integral with a pointing device" reads on "touch 
screen/pad"). 

As to claim 19, Walker et al. discloses wherein said controlling step includes controlling 
network access in a computer system (See pages 2-3, paragraphs 0018-0019). 

As to claim 21, Walker et al. discloses wherein said controlling step includes controlling 
record access in a computer system (See page 3, paragraph 0021). 

As to claim 22, Walker et al. discloses wherein said controlling step includes controlling 
resource access in a computer system (See page 2, paragraphs 0017-0018). 

As to claim 23, Walker et al. discloses wherein said controlling step includes controlling 
feature access in a computer system (See page 4, paragraphs 0023-0032). 

Claim Rejections - 35 USC § 103 
3. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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4. Claims 1-12, 14, 16, and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Walker et al. (U.S. Pub. No. 2003/002881 1 Al) in view of Felsher (U.S. Pub. No. 
2002/0010679 Al). 

As to claim 1, Walker et al. discloses a secure computer resource access system (See 
page 3, paragraph 0019), comprising: 

a fingerprint reading device (See page 4, claim 1 language); 

a store of fingerprint data corresponding to a plurality of different users (See page 2, 
paragraph 0017); 

an authorization system coupled to said reading device and configured to access said 
store and to associate an authorization level with a user based on the user f s fingerprint (See page 
2, paragraph 0017); 

said access mechanism being responsive to said authorization system to control how a 
user can interact with said computer resource based on said associated authorization level (See 
page 2, paragraphs 0012-0013, also see page 3, paragraph 0019). 

Walker et al . does not teach an access mechanism that defines a plurality of different 
authorization levels associated with a plurality of file resources. 

Felsher teaches an access mechanism that defines a plurality of different authorization 
levels associated with a plurality of file resources (See Felsher page 36, paragraphs 0251-0254). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time of the invention was made to have modified Walker et al . to include an access mechanism 
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that defines a plurality of different authorization levels associated with a plurality of file 
resources. 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to have modified Walker et al by the teaching of Felsher to include an access 
mechanism that defines a plurality of different authorization levels associated with a plurality of 
file resources because it provides for secure and cost effective method of database access and 
retrieval 

As to claim 2, Walker et al. as modified discloses wherein said fingerprint reading device 
is integral with a pointing device of a computer system (See Felsher page 38, paragraph 0285). 

As to claim 3, Walker et al. as modified discloses wherein said fingerprint reading device 
is integral with a keyboard device of a computer system (See page 2, paragraph 0017, wherein 
"fingerprint reading device is integral with a keyboard device" reads on "fingerprint 
sensor/keyboard"). 

As to claim 4, Walker et al. as modified discloses wherein said store of fingerprint data 
employs a data structure for storing said fingerprint data in an encrypted format (See Felsher 
page 35, paragraph 0248, also see Felsher abstract). 
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As to claim 5, Walker et al. as modified discloses wherein said encrypted format is 
protected by a software key (See Felsher pages 3-4, paragraphs 0043-0044, also see Walker et al. 
page 1, paragraph 0008). 

As to claim 6, Walker et al. as modified discloses wherein said authorization system 
communicates with said store of fingerprint data across an encrypted channel (See Felsher page 
13, paragraph 0113, also see Felsher pages 35-36, paragraph 0250, also see Felsher page 3, 
paragraph 0043). 

As to claim 7, Walker et al. as modified discloses wherein said authorization system 
communicates with said store of fingerprint data across a computer network (See pages 2-3, 
paragraphs 0018-0019). 

As to claim 8, Walker et al as modified discloses wherein said access mechanism 
controls file access within a computer system (See Felsher page 18, paragraph 0131). 

As to claim 9, Walker et al as modified discloses wherein said access mechanism 
controls network access within a computer system (See pages 2-3, paragraphs 0018-0019). 

As to claim 10, Walker et al. as modified discloses wherein said access mechanism 
controls record access within a computer system (See page 3, paragraph 0021). 
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As to claim 1 1, Walker et al. as modified discloses wherein said access mechanism 
controls resource access within a computer system (See Felsher page 19, paragraph 0133). 

As to claim 12, Walker et al. as modified discloses wherein said access mechanism 
controls feature access within a computer system (See Felsher page 10, paragraph 0091, also see 
Felsher page 19, paragraph 0137). 

As to claim 14, Walker et al. does not teach wherein said step of using said user 
fingerprint data is performed across an encrypted channel. 

Felsher teaches wherein said step of using said user fingerprint data is performed across 
an encrypted channel (See pages 35-36, paragraph 0250, also see page 13, paragraph 01 13, and 
see page 3, paragraph 0043). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time of the invention was made to have modified Walker et al . to include wherein said step of 
using said user fingerprint data is performed across an encrypted channel. 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to have modified Walker et al . by the teaching of Felsher to include wherein said step 
of using said user fingerprint data is performed across an encrypted channel because it provides 
for secure and efficient method of database access and retrieval. 



As to claim 16, Walker et al. does not teach wherein said scanning step is performed 
periodically as the user interacts with said computer system. 
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Felsher teaches wherein said scanning step is performed periodically as the user interacts 
with said computer system (See page 33, paragraph 0227, also pages 37-38, paragraph 0272- 
0274). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time of the invention was made to have modified Walker et al . to include wherein said scanning 
step is performed periodically as the user interacts with said computer system. 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to have modified Walker et al by the teaching of Felsher to include wherein said 
scanning step is performed periodically as the user interacts with said computer system because 
it provides for secure and efficient method of database access and retrieval. 

As to claim 20, Walker et al. does not teach wherein said controlling step includes 
controlling file access in a computer system. 

Felsher teaches wherein said controlling step includes controlling file access in a 
computer system (See page 18, paragraph 0131). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time of the invention was made to have modified Walker et al . to include wherein said 
controlling step includes controlling file access in a computer system. 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to have modified Walker et al . by the teaching of Felsher to include wherein said 
controlling step includes controlling file access in a computer system because controlling file 
access allows for added security and efficiency in accessing computer data. 
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Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Bjorn et al. (U.S. Pub. No. 2002/0054695 Al) teaches configurable multi- function 
touchable device. 

Epstein (U.S. Pub. No. 2002/0124176 Al) teaches Biometric identification mechanism 
that preserves the integrity of the biometric information. 

Houvener (U.S. Patent No. 6,424,249 Bl) teaches positive identity verification system 
and method including biometric user authentication. 

Hoyos et al. (U.S. Pub. No. 2002/0063154 Al) teaches security system database 
management. 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Neveen Abel-Jalil whose telephone number is 703-305-81 14. 
The examiner can normally be reached on 8:00AM-4: 30PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici can be reached on 703-305-3830. The fax phone number for the 
organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 703-305-3900. 
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